Application Security Trainee
eSec Forte® Technologies
Gurugram, Haryana, IndiaFresher1h agovia LinkedIn
About the Role
- Serve as a trusted advisor to enterprise customers.
- Lead analysis and remediation efforts of complex vulnerabilities using the Checkmarx platform.
- Lead security reviews and consultation efforts across various SDLC stages, focusing on holistic application security.
- Guide customers in adopting secure coding practices, threat modeling, and AppSec risk management strategies.
- Research and develop proof-of-concept (PoC) exploits to demonstrate real-world risks.
Key Responsibilities
- Perform advanced static and dynamic application security testing (SAST, DAST) across a wide range of programming languages and frameworks.
- Lead in-depth software composition analysis (SCA) to identify vulnerable open-source components and license risks.
- Support and guide customers in implementing Infrastructure as Code (IaC) and API security testing strategies.
- Provide strategic mitigation advice to development and AppSec teams based on detailed vulnerability assessments.
- Deliver technical workshops and training sessions to raise customer maturity in AppSec and secure development.
- Create and present tailored PoCs to showcase the exploitability of identified findings.
- Serve as a technical mentor to junior team members and assist with complex analysis escalations.